Practical Lab Environment Purpose Built to Span the Full Range of ICS/OT Communications

CyRenLAB is the only laboratory environment purpose-built to span the full range of ICS/OT communications – analog, serial, and IP – in a single modular platform. Unlike other ICS labs that simulate partial network layers (IP only) or omit critical communication types including analog measuerements, serial data streams, and IP-based network traffic. CyRenLAB enables complete protocol and network coverage from Level 0 to Level 3.  

Designed for NOC/SOC operators, researchers, forensic and incident responders, and educators, CyRenLAB provides a full spectrum real-world industrial environment versus just simulated IP networks. CyRenLAB enables hands-on activities in continuous monitoring and detection, baseline development, incident response, threat simulation, and industrial protocol research from Level 0 to Level 3. 

The Problem: Significant Gaps in ICS/OT Readiness 

ICS/OT cybersecurity teams face critical challenges: 

  • Gaps in protocol visibility across serial, analog, and IP communications
  • Lack of data normalization and curation from Level 0 through Level 5
  • No access to safe, full spectum realistic environments for training or testing 
  • Inability to simulate threats across multiple levels of the Purdue Model 
  • Risk of disrupting production systems 

These issues delay detection readiness, increase risk exposure, weaken response coordination across operations, and increase resource requirements for cybersecurity teams. 

The Solution: CyRenLAB

CyRenLAB addresses these gaps by delivering a platform that is representative of realistic industrial control system architectures without risking live infrastructure and operations. CyRenLAB provides training, simulation, testing, and R&D across ICS networks, protocols and device types, enabling: 

  • Continuous monitoring, detection and baselining 
  • Incident response training
  • Cyber-physical scenario validation
  • Detection activities including anomaly reproduction and forensic data analysis
  • Data normalization, curation, and contextualization for data analysis and AI/ML integration
  • Adversarial and exploit testing and validation 

CyRenLAB generates high-fidelity operational data for use in detection, operational and security analytics, baseline modeling, training and integration for Machine Learning and Artifical Intelligence platforms. 

Key Capabilities 

Full Stack ICS Protocol Support

Supports analog (4–20mA), serial, and IP protocols including Modbus, DNP3, IEC 101/104

Multi-Level Support

Simulates full ICS stack from Level 0 to Level 3 using Purdue model

Secure Testing

Hardware-in-the-loop with SCADA controllers, drives, meters, and sensors

Real Devices

Train, validate, and test without risking live production environments

Functional Capabilities

  • Incident Response
  • Continuous Diagnostics & Monitoring (CDM) 
  • Baseline Development 
  • Protocol Training
  • Threat Simulation & Validation
  • Forensics & Root Cause Analysis 
  • Security Testing and Validation
  • Research & Development 

Data & Analytics

  • Build operational baselines using raw analog, serial and IP protocol data 
  • Replay and Simulate cyber-physical operational processes for analysis 
  • Test and validate detection thresholds and alert logic 
  • Visualize message flows, inter-byte timings, and protocol abnormalities
  • Develop, build and test AI/ML models

Use Cases 

  • Level 0 – Level 5 hands-on ICS/OT protocol training 
  • Incident response tabletop exercises 
  • Tailored anomaly detection and analysis 
  • Patch testing and validation 
  • Cyber-physical forensics

Cyber Use Case:

Detection and Forensic Analysis of Man-in-the-Middle (MitM) Attacks on Serial Communications

Operational Use Case:

Early Detection of Sensor Drift or Analog Signal Degradation

ML/AI Use Case:

Training Anomaly Detection Models Using Multi-Protocol ICS Baseline Data

Benefits 

  • Safe, Realistic ICS Training: Learn, test, and respond without impacting production systems 
  • Multi-Level Architecture Simulation: Recreate scenarios from field devices to control network 
  • Protocol Diversity: Gain hands-on familiarity with legacy and modern ICS/OT protocols 

Professional Services

  • Instructor Led Training
  • CyRenLAB Environment Customization

Bring Full ICS/OT Visibility to Your Team. Start Today!